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HOLES.M 

## usage: h = holes (y,p,M) 

## Function discovered by Edwin A. Suominen 
## Written for Octave (GNU MATLAB alternative) 

function [h,yi] = holes (y,p,M) 

h = zeros (p-M-1, 2) ; 

## Compute inverse of y mod p 
[d,yi]= gcd(p,y) ; 
if ( yi(2) < 0 ) 

yi = p + yi (2) ; 
elseif 

yi = yi(2); 
endif 

## Compute column 1 of LUT for this key y: 
## holes in ascending order 

kk = 0; # Counter for iterating next valid hole value 
## For all possible hole values... 
for i = 1: p-M-1 

## Compute prospective hole value (may not be valid) 

h(i,l) = M+l - rem( i*y- (p-M-1) ,p); 

## If not valid (if >M) , set to flag value 

if ( (h(i,l)>M) I (h(i,l)<l) ) 
h (i, : ) = zeros (1,2); 

else 

kk++; # Increment valid holes counter 
endif 
endfor 

## Compute column 2 of LUT for this key y: all possible 
## overflowing values, xy mod p > M, in ascending order 
kk2 = 1; # Counter for iterating next poss. overflow value 
## For M+l (lowest overflow) to p-1 (highest possible)... 
for i = M+l: p-1 

## Compute input value that would produce each 

## possible overflowing output 

if ( rem(i*yi,p) <= M ) # If input valid... : 
h(kk2,2) = i; # ...assign overflow to LUT. 
kk2++; # Move to next available LUT entry 
endif 
endfor 

## Sort ascending by values in each column 

h = sort (h) ; ; 

if ( 1+ (length (h)-kk) > length (h) ) 



h = 0; # If there are no holes (e.g., for y=l) 
else 

h = h(l+ (length (h)-kk) : length (h) ,:) ; # Shrink h to omit flag val 
endif 

endfunction ! 
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ENCRYPT.M 

## usage: z '= encrypt (x,y,N,k) 

## INPUT: input block(s) x, key y, block length N in bits, 

## k offset of modulus from 2 A N (p=2 A N+k) j 

## OUTPUT: 2 = x*y mod (2 A N+k) , but if I 

## z >= p, z = ( (z-2 A N)*y - (k-1) ) mod (2 A N+k ) 

## Function discovered by Edwin A. Suominen 

## Written for Octave (GNU MAT LAB alternative) 

function z = encrypt (x, y, N, k) 

L = length (x); # multiple input blocks can be supplied in a vector 
z = zeros (L,l); # initialize output vector 

## Enforce k must be odd 
if ( (k/2)==floor(k/2) ) 

disp('2 A N+k cannot be prime is k is even! 1 ); 

return; 
endif 

## Define set order (M) and modulus (p) 
M = 2 A N; p = M+k; 

## Compute LUT of holes in ascending order 
## for this key y 
h = holes (y,p,M) ; 
Nh = rows (h) ; 

## Basic modulo multipication operation 
## Do as array to speed things up 
z = rem(x. *y,p) ; 

## For each element in vector. . . 
for i = 1:L 



value in LUT 



## Inventive exception handling 
if (z(i) > M) 

## Map overflowing value to corresponding hole 

## If there are no holes (h=l scalar) , this code will not 

## be called because z will always be <= M. 

c = l:Nh; c = c f ; # 1,2 ... (# of valid holes) 

c = c .* ( (z(i)*ones(Nh,l))==h(:,2) ); # Zeros with index of match 
## z = hole from LUT entry having matching overflow value 
z (i) = h (max (c) , 1) ; 
endif 

endf or 
endf unction 
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DECRYPT.M 

## usage: x - decrypt (z,y,N,k) 

## INPUT: encoded block(s) z, key y, block length N in bits, 

## k offset of modulus from 2 A N (p=2 A N+k) ; 

## OUTPUT: x = z*y A -l mod ( 2 A N+ k ) , but if 

## z = h, where h = ( ((l:k)*y - (k-1) ) mod ( 2 A N+ k ) 

## then z = M+a, where 

## a = y A -l * (2*M+ (2+p-h) ) mod ( 2 A N+k ) 

## Function discovered by Edwin A. Suominen 

## Written for Octave (GNU MATLAB alternative) 

function x = decrypt (z,y,N,k) 

L = length (z) ; # multiple input blocks can be supplied in a vector 

## Enforce k must be odd 
if ( (k/2)==floor(k/2) ) 

disp('2 A N+k cannot be prime is k is even!'); 

return; 
endif 

## Define set order (M) and modulus (p) 
M = 2 A N; p = M+k; 

## Compute LUT of holes in ascending order 
## for this key y 

[h,y] - holes (y,p,M) ; # With two args out, returns y A -l 
if ( size (h) ==1 ) 

Nh = 0; # Account for special case of no holes 
else 

Nh = rows (h) ; 
endif 

## Done with encryption key y, now y is modulo inverse of orig. y 

## For all encrypted blocks (values)... 
for i = 1:L . 

if Nh>0 

## If z(i) has been mapped to a hole, restore to overflowing value 
## For all possible hole values given this key 
for j = l:Nh 

## If matches a hole value, remap back 

if (z (i)==h(j, 1) ) , z(i) =h(j,2); endif 
endfor 
endif 

endfor 
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## Now invert remapped values in vector 

## Restored overflowing values will be decrypted properly, 
## Do as array to speed things up 
x = rem(z.*y,p); # y = y A l at this point 

endf unction 
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HOLETEST.M 

## HOLETEST.M 

## Written for Octave (GNU MATLAB alternative) 

# Np = 1; m = 128; p = M + 3; 
Np - 1; M = 512; p = M + 9; 

% Try all column (key) values in {1,2,...M} 
for j = 2:M, 

% Get hole values with brute-force lookup method 
xl = holesl ( j ,p,M) ; 

% Get hole values using formula discovered by Ed Suominen 
x2 = holes2 ( j , p, M) ; 

disp ( " ) ; 

disp ( [ ' j = » , num2str ( j ) ] ) ; 
dispC -xl- -x2-'); 
disp ( [xl x2] ) ; 

% Compare 

err(j) = sum (abs (xl-x2) ) ; 

disp (['Sum of absolute differences = ' , num2str (err ( j ) ) ] ) ; 
endfor 



HOLES1.M 

function h = holesl (y, p, M) ; 



% h = holesl (y,p,N) ; 

% Finds "holes" - skipped values of set {0,1} A N in result 
% of x*y mod p. Variable length result with only holes. 

% Number of values in set S:{0,1} A N 
% M = 2 A N; 

s = l:M; % Working array of values in set S 

% Zero out values in set that occur ("non-holes") 
for i = 1:M 

j = rem(i*y,p) ; % X y mod p 

% Zero out if not a hole 

if j<=M, s(j) = 0; end 
endf or 

% Sort decending to get holes first 
h = -sort (-s) ; 

% Trim off zeros (non-holes) 
Nnz = sum(h>0); h = h(l:Nnz)'; 

endf unction 
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HOLES2.M 

function h = holes2 (y, p, M) ; 
% h = holes2 (y,p,M) 

% Finds "holes" - skipped values of set {0,1} A N in ; result 
% of x*y mod p. j 
% Uses equation discovered by Edwin A. Suominen 

% Number of values in set S:{0,1} A N 
% M = 2 A N; 

k = p-(M+l) ; 

% For vector inputs... 
for i=l : length (y) 

for j=l:k, 

## Input values between M+l and p will of necessity 
## be mapped to holes (values not produced by inputs 
## from set {1,2,...M} because xy mod p is a bisection 
## (See HAC 1.8 Definition) 
## h(j,i) = rem( (M+j)*y ,p); 

## Equation above is simple but doesn't work when 

## M < xy < p (which happens rarely, but it happens) . 

h(j,i) = M+l - rem(j*y(i) -k,p) ; 
endfor 

endf or 

% Map negs. to 0, Sort decending to match formats 
Nok = sum(h<=M) ; h = sort(h); h = h(l:Nok); 
if Nok==0, h = [] ; endif 
h = h.* (h>0) ; 
h = -sort (-h) ; 

% Trim off zeros (non-holes) 
Nnz = sum(h>0); h = h(l:Nnz); 



endf unction 
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octave : 56> date 
ans = || 

octave: 57> clock 
ans = 

2000.0000 9.0000 30.0000 

12.0000 35.0000 32.0890 

octave: 58> type holesl 

holesl is the user-defined function 
defined from: /1093-2/holesl . m 

function h = holesl (y, p, M) ; 

% h = holesl (y,p,N) ; 

% CONFIDENTIAL AND PROPRIETARY 

% Edwin A. Suominen 

% 091600 - Initial writing 

% Finds "holes" - skipped values of set 

{0, 1} A N in result 

% of x*y mod p. Variable length result 
with only holes. 

% Number of values in set S:(0,1} A N 
% M = 2 A N; 

s = 1:M; % Working array of values in 
set S 

% Zero out values in set that occur 
("non-holes") 
for i = 1:M 

j = rem(i*y,p); % xy mod p 
% Zero out if not a hole 
if j<=M, s(j) = 0; end 
endfor 



% Sort decending to get holes first 
h = -sort (-s) ; 

% Trim off zeros (non-holes) 
Nnz = sum(h>0); h - h(l:Nnz) f ; 

endfunctionoctave: 59> type holes2 

holes2 is the user-defined function 

defined from: /1093-2/holes2 .m 

function h - holes2 (y, p, M) ; 



% h = holes2 (y,p,M) 




% Finds "holes" - skipped values of set 
{0,1} A N in result 
% of x*y mod p. 

% Uses equation discovered by EAS | | 

% Number of values in set S:{0,1} A N 
% M = 2 A N; 

k - p-( M +l); 

% For vector inputs... 
for i=l:length(y) 

for j=l:k, 

## Input values between M+l and p 
will of necessity 

## be mapped to holes (values not 
produced by inpiits 

## from set {1,2, . . .M} because xy mod 
p is a bijection 

## (See HAC 1.8 Definition) 

h(j,i) = rem( (M+j)*y ,p); 

## The simple equation above is 
substituted for the one below 

## h(j,i) = ;M+1 - rem(j*y(i)-k,p) ; 
endfor 

endfor 

% Map negs. to 0, Sort decending to match 
formats 

Nok = sum(hoM); h = sort(h); h = 
h(l:Nok); 

if Nok==0, h = [] ; endif 
h = h.* (h>0) ; 
h = -sort (-h) ; 

% Trim off zeros (non-holes) 
Nnz = sum(h>0); h » h(l:Nnz); 

endfunctionoctave: 60> type holetest 
holetest is the script file: /1093- 
2/holetest.m 



## HOLETEST. M 

## This file is CONFIDENTIAL AND 
PROPRIETARY. 





Np = 1; M = 512; p = M + 9; 

% Try all column {key) 
11,2,. ..M) 
for j = 2:M, 



values in 



% Get hole values with brute-force lookup 
method 

xl = holesl (j,p,M) ; 



% Get hole 
discovered 
% by Ed Suominen 
x2 = holes2 ( j,p,M) ; 



values using formula 



disp ( ' f ) ; 

disp ( [ 1 j = ' ,num2str (j) ] ) ; 
dispC -xl- -x2- ? ); 
disp ( [xl x2] ) ; 



% Compare 

err(j) = sum (abs (xl-x2) ) ; 

disp(['Sum of absolute differences 

' , num2str (err (j) ) ] ) ; 

endforoctave : 61> who 

*** currently compiled functions: 

clock date holesl holes2 

octave :62> holetest 

j-2 



-xl- 


-x2- 






Sum of 


absolute 


511 


511 










509 


509 






j=8 




507 


507 






-xl- 


-x2- 


505 


505 






505 


505 


Sum of 


absolute 


differences 


= 0 


497 


4 97 










489 


489 


j-3 








481 


481 


-xl- 


-x2- 






473 


473 


512 


512 






465 


465 


509 


509 






457 


457 


506 


506 






Sum of 


absolute 


503 


503 










500 


500 






j-9 




497 


497 






-xl- 


-x2- 


Sum of 


absolute 


differences 


= 0 


512 


512 










503 


503 










494 


494 


-xl- 


-x2- 






485 


485 


509 


509 






476 


476 



505 
501 
497 
493 
489 



505 
501 
497 
493 
489 



Sum of absolute differences 
j=5 



-xl- 


-x2- 


511 


511 


506 


506 


501 


501 


496 


496 


491 


491 


486 


486 


481 


481 



Sum of absolute differences 
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j<7 
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54 54 

Sum of absolute differences = 0 

j=468 

-xl- -x2- 

424 424 

371 371 

318 318 

265 265 

212 212 

159 159 

106 106 

53 53 

Sum of absolute differences = 0 

j=469 

-xl- -x2- 

416 416 

364 364 

312 312 

260 260 

208 208 

156 156 

104 104 

52 52 

Sum of absolute differences = 0 

j-470 

-xl- -x2- 
408 408 
357 357 
306 306 
255 255 
204 204 
153 153 
102 102 
51 51 

Sum of absolute differences = 0 

j=471 

-xl- -x2- 
400 400 
350 350 
300 300 
250 250 
200 200 
150 150 
100 100 
50 50 

Sum of absolute differences = 0 

j=472 

-xl- -x2- 
392 392 
343 343 
294 294 



245 245 
196 196 
147 147 

98 98 

49 49 
Sum of absolute 'differences 
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96 
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376 376 

329 329 

282 282 

235 235 

188 188 

141 141 j 
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47 47 
Sum of absolute differences 
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360 360 

315 315 

270 270 

225 225 
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135 135 
90 90 
45 45 
Sum of absolute differences 

j=477 
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91 


78 


78 


65 


65 


52 


52 


39 


39 


26 


26 


13 


13 



Sum of absolute differences = 0 


M Np err j ! 


j=509 




octave: 64> size(M) 


-xl 


- -x2- 


ans = 


96 


96 




84 


84 


1 1 i 


72 


72 




60 


60 


octave: 65> size(xl) 


48 


48 


ans = 


36 


36 




24 


24 


8 1 


12 


12 





Sum of absolute differences = 0 



-x2- 



j-510 




-xl 




88 


88 


77 


77 


66 


66 


55 


55 


44 


44 


33 


33 


22 


22 


11 


11 



Sum of absolute differences 
j=511 



- 0 



-xl- -x2- 
80 80 
70 70 
60 60 
50 50 

40 40 ; 
30 30 
20 20 
10 10 

Sum of absolute differences 



-x2- 



= 0 



j=512 




-xl 




72 


72 


63 


63 


54 


54 


45 


45 


36 


36 


27 


27 


18 


18 


9 


9 



Sum of absolute ^differences = 0 
octave :63> who 

*** currently compiled functions: 

clock columns date 

holes2 num2str rem rows 

*** local user variables: 

xl x2 



holesl 



octave: 66> size (err) 
ans = 

512 1 

octave: 67> max (abs (err ) ) 
ans = 0 ; 

octave :68> 'Simple hole finding function 
works ! 1 

ans = Simple hole finding function works! 
octave: 69> clock 
ans = 



octave: 70> diarv^ off 



R-l 



HOLES3.M 

function [k,h] = holes3 (y, p, M) ; 



% h = holes3 (y,p,M) 

% CONFIDENTIAL AND PROPRIETARY 

% Edwin A. Suominen 

% Finds "holes" - skipped values of set {0,l} A N in result 
% of x*y mod p. 

% Uses equation discovered by EAS 9/16/00 

% Number of values in set S:{0,l} A N 
% M = 2 A N; 



k = p- (M+l) ; 



% For vector inputs . . . 
for i=l: length (y) 



for j=l:k, : 

## Input values between M+l and p will of necessity 
## be mapped to holes (values not produced by inputs 
## from set {1,2, . . . M} because xy mod p is a bisection 
## (See HAC 1.8 Definition) 
## h(j,i) = rem( (M+j)*y ,p) ; 

## Equation above is simple but doesn't work when 

## M < xy < p (which happens rarely, but it happens) . 

h(j,i) = M+l - rem( j*y (i) -k,p) ; 
endfor 

endfor 



if (nargout>=2) 

k = l:k; k=k' ; 
endif 



endf unction 



TEST3.M 

TESTS EACH INPUT FOR ALL KEYS IN SPACE 



## TEST3.M 

## Block size is 10 bits. Input is taken from set Z: { 1, 2, . . . 1024 } 
## Because of EAS-invented "pseudogroup" operation,; output also 
## falls in set Z. 

## Keys are also taken from set Z - any set element is OK. 

## This test proves the following: 

## (1) Output set is same as input set Z. 

## (2) Each input value has a unique output value, ifor a given 

## key value. | 

## (3) The output value from "encrypt .m" can be converted back to 

## the input value with "decrypt. m, " given the key ;value. 

## (4) For a given input value, each key value produces a unique 

## output value. 

## Written for Octave (GNU MAT LAB alternative) 

## No paging - want current screen output 
page_screen_output=0 ; ! 

## Set values defining set and underlying group order 

N = 10; M = 2 A N; # M = 1024 

k = 7; p = M+k; # p = 1031 (prime) 

## Create empty matrix of output values 
A = zeros (M) ; 

## Define vector with elements of set Z 
v = linspace (1, M,M) ; 

## Create string matrix of ■ neutral values for test condition code 
cc = [ 1 -RESULTS- '; 1 key: 1234']; # Header 
## for each key value... 
for i == 1:M 

## insert key value before neutrals 

ccr = [num2str (i) , 1 : ■ ]; 

## Leading zeros to make columns line up 

if i<10, ccr = ['0' ccr]; endif 

if i<100, ccr = ['0' ccr]; endif 

if i<1000, ccr - [ f 0 f ccr]; endif 

cc (i+2, : ) = ccr; 
endfor 



############ PART ONE OF TWO ############## 

disp([ , Tests 1-3, for each key value in set 1, 2, . . . ' , num2str (M) ] ) ; 
disp( ' ! » ) ; 



## For all possible key values in Z. 
for i = 1:M 



## Show progress 

disp( [ 'Encrypting and decrypting with key y=' , nunj2str (i) ,»...»]) ; 

## Set key value for this iteration 
y = v(i) ; 



## Encrypt all possible input values in set Z with key 
b = encrypt (v, y,N, k) ; 

A(:,i) = b'; # Add this output vector to output niatrix 

## Test for conditions (1) , (2) now 
b = sort (b) ; # Sort ascending 

disp([ 'Output set: min= 1 , num2str (min (b) ) , • , max= 'j, num2str (max (b) ) ] ) ; 

##### Test Condition (1) ##### 
if ( max(b)==M ) 

disp ( 'Output set is same as input set.'); I 
cc ( i+2 , 7 ) = ' + ' ; ' ' ' ] 

else 

disp ( ' PROBLEM: Output set larger or smaller thin input set"). 
cc(i+2,7) - 'o'; : ' " 

endif • 



##### Test Condition (2) ##### j 

## Each input value should have a unique output value, for a aiven 
## key value. 

b = diff(b); # Get differentials between sorted elements 
if ( min(b)==l & max (b) ==1 ) 

disp ('All elements in output set are unique ')• 
cc (i+2, 8) = '+'; " ' 

else 

disp ('PROBLEM: skipped or duplicated element (s); in output set ' • ) • 
cc(i+2,8) = 'o'; I 
endif I 



##### Decrypt output values for this key ##### 
b = decrypt (A (:,i),y,N, k) ' ; 



##### Test Condition (3) ##### 



## Get differentials between plaintext-encrypted-decrypted (b) and 
plaintext (v) 

b = b - v; # Should be all zeros if test passes 
if ( (max(abs(b) )==0) ) 

dispCAll elements in input set encrypt and idecrypt with key and 
inverse. ' ) ; ' 
cc(i+2,9) = »+»; 
else | 

disp( 'PROBLEM: One or more elements !do not match in 
encryption/decryption!'); j 
cc(i+2,9) = 'o'; 
endif 



disp("); 
endfor 

############ PART TWO OF TWO ############## j 

disp(['Test 4, for each input value in set 1,2,...', num2str (M) ] ) ; 
disp( ' , , j . 

##### Test Condition (4) ##### 

## For all possible input values in Z, working! with full matrix of 
outputs 

for i = l:M j 
## Show progress 

disp([ 'Analyzing outputs for input x= ' , num2str (i) , • with all keys in 
set ...']); 

## For a given input value, each key value should produce a unique 
output value. 

b = diff (sort (A(i, :) ) ) ; # Get differentials between sorted elements 
if ( min(b)==l & max(b)==l ) 

dispCAll elements in output set are unique.' ); ; 

cc(i+2,10) = •+•; J 
else 

disp( 'Skipped or duplicated element (s) in output set.'); 
cc(i+2,10) = 'o'; 
endif 

dispC); i 
endfor 



## Display test results 
disp (cc) 



T-3 



RESULTS OF TEST3.M 



octave : 14> date 
ans - | 

octave :15> clock 
ans = 



octave: 16> type test3 

test3 is the script file: /1093-2/test3 .m 
## TEST3.M 

## Block size is 10 bits. Input is taken from set 
Z: {1,2, . . .1024} 

## Because of EAS-invented "pseudogroup" operation 

output also 

## falls in set Z. 

## Keys are also taken from set 2 - any set element is 
OK. 

## This test proves the following: 
## (1) Output set is same as input set Z. 
## (2) Each input value has a unique output value, for a 
given 

## key value. 

## (3) The output value from "encrypt .m" can be converted 
back to 

## the input value with "decrypt. m," given the key value. 
## (4) For a given input value, each key value produces a 
unique 

## output value. 




## Written for Octave (GNU MAT LAB alternative) 




## No paging - want current screen output 
page_screen_output=0; 

## Set values defining set and underlying group order 

N = 10; M - 2 A N; # M = 1024 

k - 7; p = M+k; # p - 1031 (prime) 

## Create empty matrix of output values 
A = zeros (M) ; 

## Define vector with elements of set Z 
v = linspace(l,M,M) ; 

## Create string matrix of '-' neutral values for test 
condition codes 

cc « ['-RESULTS- •; • key: 1234']; # Header 
## for each key value... 
for i - 1:M 

## insert key value before neutrals 

ccr - [num2str (i) , • : • ] ; 

## Leading zeros to make columns line up 

if i<10, ccr = ['0' ccr]; endif 

if i<100, ccr « ['0* ccr]; endif 

if i<1000, ccr - ['0' ccr]; endif 

cc(i+2, : ) = ccr; 
endfor 



############ PART ONE QF TWO ############## 
disp([ 'Tests 1-3, tor each key value 
1,2, .. . • , num2str (M) J ) ; j 



disp( '■ 
'), 



## For all possible key values in Z... 
for i - 1:M 

## Show progress 

disp([ 'Encrypting 1 and decrypting with k 
y=' ,num2str (i) ,'...»]) ; 

## Set key value forj this iteration 
y - v(i) ; 

## Encrypt all possible input values in set Z with key 
b « encrypt (v, y,N, k) ; 

A(:,i) ~ b'; # Add this output vector to output matrix 

## Test for conditions (1),(2) now 
b - sort(b); # Sort ascending 



disp( [ 'Output Iset: 
max- ' , num2str (max (b) ) ] ) ; 



min=',num2str (min(b) ) , 



##### Test Condition; (1) ##### 
if ( max(b)==M ) 

disp( 'Output set is same as input set.'); 
cc(i+2, 7) =•+■.; 
else 

di sp ( ' PROBLEM : Output set larger or smaller the 
input set ! ' ) ; 

cc(i+2,7) = 'o'; ! 
endif i 



##### Test Condition! (2) ##### 

## Each input value ; should have a unique output value 
for a given 

## key value. ■ 

b = diff(b); # Get differentials between sorte 
elements ; 

if ( min (b) ==1 & max;(b)==l ) 

dispCAll elements : in output set are unique.'); 
cc(i+2,8) = '+'; 
else 

disp ( ' PROBLEM: skipped or duplicated element(s) i 
output set ! ' ) ; 

cc(i+2,8) - *o'; i 
endif 



##### Decrypt output values for this key ##### 
b - decrypt (A ( : , i) , y|, N, k) » ; 

##### Test Condition; (3) ##### 

## Get differentials between plaintext-encrypted 
decrypted (b) and plaintext (v) 

b = b - v; # Should be all zeros if test passes 
if ( (max(abs(b) )==0i) ) 

dispCAll elements 1 in input set encrypt and decryp 
with key and inverse ♦'); 
cc(i+2,9) = '+'; 



else 

disp ( 1 PROBLEM: One or more elements do not match in 
encryption/decryption! ') ; 
cc(i+2,9) - 'o'; 
endif 

dispC »); 

endfor 



############ PART TWO OF TWO ############## 

dispU'Test 4, for each input value in set 

1,2, .. , 1 , num2str (M) ] ) ; 

disp( ' 

■ ) ; 

##### Test Condition (4) ##### 

## For all possible input values in Z, working with full 
matrix of outputs 
for i = 1:M 

## Show progress 

disp ([ 'Analyzing outputs for input x« 1 , num2str (i) , • 
with all keys in set...']); 

## For a given input value, each key value should 
produce a unique output value. 

b - diff (sort (A (i,:))); # Get differentials between 
sorted elements 

if ( min(b)==l & max (b) ==1 ) 

disp ('All elements in output set are unique. 1 )/ 
cc{i+2,10) = ' + '; 
else 

disp ( 'Skipped or duplicated element (s) in output 
set.'); 

cc(i+2,10) = 'o'; 
endif 

disp( ' ' ) ; 

endfor 

## Display test results 
disp (cc) 

octave :18> test3 

Tests 1-3, for each key value in set 1,2,... 1024 



Encrypting and decrypting with key y=l... 

Output set: min«l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse . 

Encrypting and decrypting with key y=2 . . . 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=3. . . 

Output set: min«l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse . 

Encrypting and decrypting with key y=4 . . . 
Output set: min-1, max=1024 
Output set is same as input set. 



All elements in output set are unique. 

All elements in input; set encrypt and decrypt with * 
and inverse . 

Encrypting and decrypting with key y«5... 
Output set: min~l, max*1024 

Output set is same as input set. ' 
All elements in output! set are unique. 

All elements in input! set encrypt and decrypt with k 
and inverse. 

Encrypting and decrypting with key y=6... 

Output set: min=l / max^l024 

Output set is same as input set. 

All elements in output; set are unique. 

All elements in input, set encrypt and decrypt with k 
and inverse. 

Encrypting and decrypting with key y=7... 

Output set: min=l, max==1024 

Output set is same as input set. 

All elements in output I set are unique. 

All elements in input? set encrypt and decrypt with k< 
and inverse. 

Encrypting and decrypting with key y=8 . . . 

Output set: min«l, max=>1024 

Output set is same as input set. 

All elements in output; set are unique. 

All elements in inputj set encrypt and decrypt with k< 
and inverse. i 

Encrypting and decrypting with key y«9. . . 

Output set: min-1, max?*1024 

Output set is same as input set. 

All elements in output. set are unique. 

All elements in input; set encrypt and decrypt with k€ 
and inverse. 

Encrypting and decrypting with key y=10... 

Output set: min-1, max=1024 

Output set is same as input set. 

All elements in output: set are unique. 

All elements in input! set encrypt and decrypt with ke 
and inverse. 

Encrypting and decrypting with key y=ll... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output; set are unique. 

All elements in input; set encrypt and decrypt with ke 
and inverse. \ 

Encrypting and decrypting with key y=12... 

Output set: min=l, max- 102 4 

Output set is same as input set. 

All elements in output; set are unique. 

All elements in input; set encrypt and decrypt with ke 
and inverse. i 

Encrypting and decrypting with key y=13... 

Output set: min«l, maxfl024 

Output set is same as input set. 

All elements in output! set are unique. 

All elements in input? set encrypt and decrypt with ke 
and inverse. j 

Encrypting and decrypting with key y=14... 

Output set: min=l, maxf=1024 

Output set is same as input set. 

All elements in output 1 set are unique. 

All elements in input; set encrypt and decrypt with ke- 
and inverse. 
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Encrypting and decrypting with key y=»15... 
Output set: min=l, max=1024 
Output set is same as input set. 
All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=16... 
Output set: min=l, max=1024 
Output set is same as input set. 
All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=17... 
Output set: min^l, max=1024 
Output set is same as input set. 
All elements in output set are unique. 
All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=18... 
Output set: min-1, max=1024 
Output set is same as input set. 
All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse . 

Encrypting and decrypting with key y*19... 
Output set: min=l, max=1024 
Output set is same as input set. 
All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=20... 
Output set: min*l, max=1024 
Output set is same as input set. 
All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=2l... 
Output set: min-1, max=1024 
Output set is same as input set. 
All elements in output set are unique. 
All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=22... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=23... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=24... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse . 

Encrypting and decrypting with key y=25... 
Output set: min-1, max=1024 



Output set is same as input set. 

All elements in output : set are unique. 

All elements in input: set encrypt and decrypt with k 
and inverse. 

Encrypting and decrypting with key y«26... 

Output set: min=l, maxfl024 

Output set is same as input set. 

All elements in output j set are unique. 

All elements in input; set encrypt and decrypt with k 
and inverse. j 

Encrypting and decrypting with key y=27... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output; set are unique. 

All elements in input : set encrypt and decrypt with k 
and inverse. 



Encrypting and decrypting with key y=28... 

Output set: min-1, max=1024 

Output set is same as input set. 

All elements in output: set are unique. 

All elements in input; set encrypt and decrypt 

and inverse. 



with kt 



Encrypting and decrypting with key y=29... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output; set are unique. 

All elements in input; set encrypt and decrypt with k< 
and inverse. 

Encrypting and decrypting with key y=30... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output; set are unique. 

All elements in input; set encrypt and decrypt with ke 
and inverse. 

Encrypting and decrypting with key y-31... 

Output set: min=l, max*1024 

Output set is same as input set. 

All elements in output: set are unique. 

All elements in input set encrypt and decrypt with ke 
and inverse. 

Encrypting and decrypting with key y=32... 
Output set: min*l, max*1024 
Output set is same as input set. 
All elements in output: set are unique. 



All elements 
and inverse. 



in input set encrypt and decrypt with ke 



Encrypting and decrypting with key y=33... 

Output set: min=l, maxf=1024 

Output set is same as input set. 

All elements in output; set are unique. 

All elements in input set encrypt and decrypt with ke 
and inverse. ; 

Encrypting and decrypting with key y«34... 

Output set: min=l, maxi=l024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input; set encrypt and decrypt with ke- 
and inverse. 

Encrypting and decrypting with key y=35... 

Output set: min=l, max«1024 

Output set is same as input set. 

All elements in output. 1 set are unique. 
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Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse . 

Encrypting and decrypting with key y=1014... 

Output set: min=l, max*1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=1015... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=1016... 

Output set: min-1, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=1017... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y*=1018... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=1019... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=1020... 

Output set: min=l / max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse . 

Encrypting and decrypting with key y=1021... 

Output set: min=l, max«1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=1022... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output set are unique. 

All elements in input set encrypt and decrypt with key 
and inverse. 

Encrypting and decrypting with key y=1023... 

Output set: min=l / max=1024 

Output set is same as input set. 

All elements in output set are unique. 



All elements in input: set encrypt and decrypt with \> 
and inverse. 

Encrypting and decrypting with key y=1024... 

Output set: min=l, max=1024 

Output set is same as input set. 

All elements in output! set are unique. 

All elements in input; set encrypt and decrypt with k 
and inverse. 

Test 4, for each input: value in set 1,2,... 1024 



Analyzing outputs for input x=l with all keys in set... 
All elements in output: set are unique. 

I 

Analyzing outputs for input x=2 with all keys in set... 
Skipped or duplicated element(s) in output set. 

Analyzing outputs for input x=3 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=4 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x-5 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x»6 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=7 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=8 with all keys in set... 
Skipped or duplicated element {s) in output set. 

Analyzing outputs for input x=9 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x<=10 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=ll with all keys in set. 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x-12 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x«13 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x«14 with all keys in set... 
Skipped or duplicated felement(s) in output set. 

Analyzing outputs for input x=15 with all keys in set... 
Skipped or duplicated <slement(s) in output set. 

Analyzing outputs for input x=16 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=17 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=*18 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=19 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x*20 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x-21 with all keys in set... 



Analyzing outputs for input x=995 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x-996 with all keys in set... 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=997 with all keys in set. 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=998 with all keys in set 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=999 with all keys in set. 
Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1000 with all keys in 
set . . . 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1001 with all keys in 
set ... 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1002 with all keys in 
set . . . 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1003 with all keys in 
set ... 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1004 with all keys in 
set . . . 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x«1005 with all keys in 
set 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x«1006 with all keys in 
set ... 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x-1007 with all keys in 
set . . . 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1008 with all keys in 
set. . . 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1009 with all keys in 
set. . . J 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x-1010 with all keys in 
set ... 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1011 with all keys in 
set. . . 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x=1012 with all keys in 
set . . . 

Skipped or duplicated element (s) in output set. 

Analyzing outputs for input x-1013 with all keys in 
set . . . 

Skipped or duplicated element (s) in output set. 



Analyzing 
set . . . 
Skipped or 



Analyzing 
set. . . 
Skipped or 



Analyzing 
set. . . 
Skipped or 

Analyzing 
set . . . 
Skipped or 

Analyzing 
set. . . 
Skipped or 

Analyzing 
set. . , 
Skipped or 

Analyzing 
set . . . 
Skipped or 

Analyzing 
set... 
Skipped or 

Analyzing 
set... 
Skipped or 

Analyzing 
set. . . 
Skipped or 

Analyzing 
set . . . 
Skipped or 

-RESULTS- 

key: 1234 
0001: 
0002: 
0003: 
0004: 
0005: 
0006: 
0007: 
0008: 



outputs for input x=1014 with all keys 
duplicated element (s) in output set. 
outputs for input x=l015 with all keys 
duplicated ^lement(s) in output set. 
outputs tot input x-1016 with all keys 

i 

duplicated element (s) in output set. 
outputs for input x=1017 with all keys 
duplicated element (s) in output set. 
outputs for input x=1018 with all keys 
duplicated element (s) in output set. 
outputs for input x=1019 . with all keys 
duplicated element (s) in output set. 
outputs for input x=1020 with all keys : 
duplicated element (s) in output set. 
outputs for input x=1021 with all keys : 
duplicated element (s) in output set. 
outputs for input x»1022 with all keys : 
duplicated Element (s) in output set. 
outputs foz input x-1023 with all keys : 
duplicated element (s) in output set. 
outputs for input x=1024 with all keys j 
duplicated element (s) in output set. 
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0836: +++o 
0837: +++o 
0838: +++o 
0839: +++o 
0840: +++o 
0841: +++o 
0842: +++o 
0843: +++o 
0844: +++o 
0845: +++o 
0846: +++o 
0847: +++o 
0848: +++o 
0849: +++o 
0850: +++o 
0851: +++o 
0852: +++o 
0853: +++o 
0854: +++o 
0855: +++o 
0856: +++o 
0857: +++o 
0858: +++o 
0859: +++o 
0860: +++o 
0861: +++o 
0862: +++o 
0863: +++o 
0864: +++o 
0865: +++o 
0866: +++o 
0867: +++o 
0868: +++o 
0869: +++o 
0870: +++o 
0871: +++o 
0872: +++o 
0873: +++o 
0874: +++o 
0875: +++o 
0876: +++o 
0877: +++o 
0878: +++o 
0879: +++o 
0880: +++o 
0881: +++o 
0882: +++o 
0883: +++o 
0884: +++o 
0885: +++o 
0886: +++o 
0887: +++o 
0888: +++o 
0889: +++o 
0890: +++o 
0891: +++o 
0892: +++o 
0893: +++o 
0894: +++o 
0895: +++o 
0896: +++o 
0897: +++o 
0898: +++o 
0899: +++o 
0900: +++o 
0901: +++o 
0902: +++o 
0903: +++o 



0904: 
0905: 
0906: 
0907: 
0908: 
0909: 
0910: 
0911: 
0912: 
0913: 
0914: 
0915: 
0916: 
0917: 
0918: 
0919: 
0920: 
0921: 
0922: 
0923: 
0924: 
0925: 
0926: 
0927: 
0928: 
0929: 
0930: 
0931: 
0932: 
0933: 
0934: 
0935: 
0936: 
0937: 
0938: 
0939: 
0940: 
0941: 
0942: 
0943: 
0944: 
0945: 
0946: 
0947: 
0948: 
0949: 
0950: 
0951: 
0952: 
0953: 
0954: 
0955: 
0956: 
0957: 
0958: 
0959: 
0960: 
0961: 
0962: 
0963: 
0964: 
0965: 
0966 
0967 
0968 
0969 
0970 
0971 
0972 
0973: 
0974: 
0975: 
0976: 



+++o 
+++o 

+++0 

+++o 
+++o 
+++o 

+++0 

+++o 
+++o 
+++o 
+++o 
+++o 

+++0 

+++o 
+++o 
+++o 
+++o 
+++o 
+++o 

+++o 
+++o 
+++o 

+ ++0 

+++o 
+++o 
+++o 
+++o 
+++o 
+++o 
+++o 
+++o 

+++0 
+++0 

+++o 
+++o 
+++o 

+++0 
+++0 
+ ++0 

+++o 
+++o 
+++o 
+++o 

+++0 

+++o 

+++0 
+ ++0 
+ ++0 
+++0 

+++o 

+++0 

+++o 

+++0 
+++0 

+++o 

+++0 

+++o 
+++o 
+++o 
+++o 

+ + + 0 
+++o 
+++o 
+++o 
+++o 
+++o 
+++o 

+++0 

+++o 

+ + + o 

+++o 
+++o 



0977: +++o 

0978: +++o 

0979: +++o 

0980: +++o 

0981: +++o 

0982: +++o 

0983: +++o 

0984: +++o 

0985: +++o 

0986: +++o 

0987: +++o 

0988: +++o 

0989: +++o 

0990: +++o 

0991: +++o 

0992: +++o 

0993: +++o 

0994: +++o 

0995: +++o 

0996: +++o 

0997: +++o 

0998: +++o 

0999: +++o 

1000: +++o 

1001: +++o 
1002: +++o 
1003: +++o 
1004: +++o 
1005: +++o 
1006: +++o 
1007: +++o 
1008: +++o 
1009: +++o 
1010: +++o 
1011: +++o 
1012: +++o 
1013: +++o 
1014: +++o 
1015: +++o 
1016: +++o 
1017: +++o 
1018: +++o 
1019: +++o 
1020: +++o 
1021: +++o 
1022: +++o 
1023: +++o 
1024: +++o 

octave :19> diary off 



U- C2_ 



RESULTS OF TEST3B.M 



octave: 4> date 



ans = 




octave :5> clock 
ans = 



octave: 6> type test 3b 

test3b is the script file: /1093-2/test3b.m 
## TEST3B.M 

## Block size is 10 bits. Input is taken from set Z: {1, 2, . . . 1024 
## fanrL^efz: 1 ^^ '' PSeud °S ro ^'' operation, output also 
## Keys are also taken from set Z - any set element is OK. 

## This test analyzes outputs for a given input over all 
## possible keys. 




J^rUtenforOctave (GNU MAT LAB alternative) 




## No paging - want current screen output 
page_screen_output=0 ; 

## Set values defining set and underlying group order 

N = 10; M = 2-N; # M = 1024 

k = 7; p = M+k; # p = 1031 (prime) 

## Define vector with elements of set Z 
v = linspace (1,M,M) ; 

## Define vector of skip/repeat counts 
cc - zeros (1,M) ; 

dispjj'Test for each input value in set 1, 2, . . . ', num2str (M) 
disp ( 1 ____ 



]); 



j ); 



## For all possible input values in Z. 
for i = l:M 



## Show progress 

disp( ['Encrypting with input value y= • , num2str (i) , 1 . . . • ] j 

## Set input value for this iteration 
x = v(i) / 

## Encrypt input value with all keys in set Z 
for j - 1:M 

b(j) = encrypt (x,v(j),N,k) ; 
endfor 



disp( [ 'Output set: min= ' , num2str (min (b) ) , ' , max= ' , num2str (max (b) ) ] ) ; 
dispC); 



## Identify any skipped or repeated set elements 
## with vector of index numbers 

bl = sort(b); # Sort ascending ; 
b2 - [diff(bl)']; # Should be all l's... 
b2 = b2~=l; # ...so l's indicate skips/repeats 

Nsr = sum(b2); # Count of skips/repeats 

< 

b3 = b2 . * v(l:M-l); # map index numbers to skips/repeats 
b3 = sort(b3); # Sort ascending 
b4 = b3(M-Nsr:M-l) ; # Select only skips/repeats 

if (Nsr > 0) 

disp([ 'There are ' , num2str (Nsr ) , 1 skips & repeats, at:');' 
disp(b4) ; 

disp ( 1 t j . 

c = zeros (6, Nsr) ; # Start with empty ("0") matrix 
for j = l:Nsr 

kl = max( [1 b4 (j)-2] ) ; 

k2 = min( [b4 (j)+3 M] ) ; 

c(l:k2-kl+l, j) =bl(kl:k2); 
endf or 

disp (c) 

endif 

cc(i) = Nsr; # Add this count to vector 
disp ([ 'Maximum skips & repeats for a given input (so f ar ) : ' j num2str (max (cc) ) 1 ) 
disp("); 



endfor 



octave: 9> test3b 

Test for each input value in set 1,2,... 1024 



Encrypting with input value y=l... 
Output set: min=l, max=1024 

Maximum skips & repeats for a given input (so far):0 

Encrypting with input value y=2 . . . 
Output set: min=l, max=1024 

There are 6 skips & repeats, at: 

10 518 520 1021 1022 1023 



8 515 

9 516 
10 517 
10 517 



517 1016 

517 1017 

518 1018 
518 1020 



1017 1018 

1018 1020 
1020 1022 
1022 1024 



11 518 519 1022 1024 0 

12 518 520 1024 0 0 

Maximum skips & repeats for a given input (so far): 6 

Encrypting with input value y=*3. . . 
Output set: min=l, max=1024 

There are 8 skips & repeats, at: 



10 


346 


690 


692 


1016 


1018 


1020 


1022 


8 


343 


686 


688 


1010 


1012 


1015 


1018 


9 


344 


687 


688 


1011 


1014 


1017 


1020 


10 


345 


688 


689 


1012 


1015 


1018 


1021 


10 


345 


688 


689 


1014 


1017 


1020 


1023 


11 


346 


689 


690 


1015 


1018 


1021 


1024 


12 


347 


689 


691 


1017 


1020 


1023 


0 



Maximum skips & repeats for a given input (so far): 8 

Encrypting with input value y=4 ... 
Output set: min=l, max=1024 

There are 10 skips & repeats, at: 

3 260 519 523 778 1011 1014 1017 1020 1023 • 

1020 , 

1021 : 

1022 1 
1024 ; 

o I 

0 : 



Encrypting with input value y=5... 
Output set: min=l, max=1024 

There are 10 skips & repeats, at: 

6 212 418 624 830 1005 1009 1013 1017 1021 



1018 
1019 
1020 
1022 
1023 
1024 



Encrypting with input value y=6... 
Output set: min=l, max=1024 

There are 10 skips & repeats, at: 

176 346 518 691 864 999 1004 1009 1014 1019 



1016 « 
1017 
1018 : 

1020 - 

1021 ! 

1022 ; 



1 


257 


515 


518 


772 


1004 


1008 


1012 


1016 


2 


258 


516 


519 


773 


1005 


1009 


1013 


1017 


3 


259 


517 


520 


774 


1006 


1010 


1014 


1018 


3 


259 


517 


520 


774 


1008 


1012 


1016 


1020 


4 


260 


518 


521 


775 


. 1009 


1013 


1017 


1021 


5 


261 


519 


522 


776 


1010 


1014 


1018 


1022 



Maximum skips & repeats for a given input (so far): 10 



4 


209 


414 


619 


824 


998 


1003 


1008 


1013 


5 


210 


415 


620 


825 


999 


1004 


1009 


1014 


6 


211 


416 


621 


826 


1000 


1005 


1010 


1015 


6 


211 


416 


621 


826 


1002 


1007 


1012 


1017 


7 


212 


417 


622 


827 


1003 


1008 


1013 


1018 


8 


213 


418 


623 


828 


1004 


1009 


1014 


1019 



Maximum skips & repeats for a given input (so far): 10 



174 


343 


514 


686 


858 


992 


998 


1004 


1010 


175 


344 


515 


687 


859 


993 


999 


1005 


1011 


176 


345 


516 


688 


860 


994 


1000 


1006 


1012 


176 


345 


516 


688 


860 


996 


1002 


1008 


1014 


177 


346 


517 


689 


861 


997 


1003 


1009 


1015 


178 


347 


518 


690 


862 


998 


1004 


1010 


1016 



Maximum skips & repeats for a given input (so far): 10 



Encrypting with input value y=7 . , 
Output set: min=l, max=1023 

There are 11 skips & repeats, at: 



149 


297 


445 


593 


741 


889 


994 


1000 


1006 


1012 


;1018 


147 


294 


441 


588 


735 


882 


986 


993 


1000 


1007 


: 1014 


148 


295 


442 


589 


736 


883 


987 


994 


1001 


1008 


1015 


149 


296 


443 


590 


737 


884 


988 


995 


1002 


1009 


1016 


149 


296 


443 


590 


737 


884 


990 


997 


1004 


1011 


.1018 


150 


297 


444 


591 


738 


885 


991 


998 


1005 


1012 


.1019 


151 


298 


445 


592 


739 


886 


992 


999 


1006 


1013 


.1020 



Maximum skips & repeats for a given input (so far): 11 

Encrypting with input value y=8 . . 
Output set: min=l, max=1024 

There are 12 skips & repeats, at: 



3 


4 


261 


520 


521 


779 


988 


995 


1002 


1009 


1016 


1023 


1 


2 


257 


515 


516 


772 


980 


988 


996 


1004 


'1012 


1020 


2 


3 


258 


516 


517 


773 


981 


989 


997 


1005 


11013 


1021 


3 


3 


259 


517 


517 


774 


982 


990 


998 


1006 


11014 


1022 


3 


3 


259 


517 


517 


774 


984 


992 


1000 


1008 


;1016 


1024 


3 


4 


260 


517 


518 


775 


985 


993 


1001 


1009 


[1017 


0 


4 


5 


261 


518 


519 


776 


986 


994 


1002 


1010 


:1018 


0 



Maximum skips & repeats for a given input (so far): 12 

Encrypting with input value y=9... 
Output set: min-l, max=1024 



There are 12 skips & repeats, at: 



2 


346 


347 


464 


692 


922 


982 


990 


998 


1006 


; 1014 


1022 


1 


343 


344 


459 


686 


915 


974 


983 


992 


1001 


'1010 


1019 


2 


344 


345 


4 60 


687 


916 


975 


984 


993 


1002 


:1011 


1020 


2 


345 


345 


461 


688 


917 


976 


985 


994 


1003 


: 1012 


1021 


3 


345 


345 


461 


688 


917 


978 


987 


996 


1005 


1014 


1023 


4 


345 


346 


462 


689 


918 


979 


988 


997 


1006 


;iois 


1024 


0 


346 


347 


463 


690 


919 


980 


989 


998 


1007 


• 1016 


0 



Maximum skips & repeats for a given input (so far): 12 



Encrypting with input value y=10... 
Output set: min=l, max=1024 

There are 12 skips & repeats, at: 



2 


4 


416 


520 


829 


933 


976 


985 


994 


1003 


;1012 


1021 


1 


2 


412 


515 


823 


926 


968 


978 


988 


998 


; 1008 


1018 


2 


2 


413 


516 


824 


927 


969 


979 


989 


999 


:ioo9 


1019 


2 


3 


414 


517 


825 


928 


970 


980 


990 


1000 


:1010 


1020 


3 


3 


414 


517 


825 


928 


972 


982 


992 


1002 


1012 


1022 


3 


4 


415 


518 


826 


929 


973 


983 


993 


1003 


; 1013 


1023 


0 


5 


416 


519 


827 


930 


974 


984 


994 


1004 


|1014 


1024 



Maximum skips & repeats for a given input (so far): 12 



17 


35 


53 


71 


89 107 114 


342 


458 


19 


37 


55 


73 


91 109 114 


342 


458 


20 


38 


56 


74 


92 110 115 


343 


459 


21 


39 


57 


75 


93 111 116 


344 


460 


Maximum 


skips 


& 


repeats 


for a given 


input 


(so 



687 687 859 
687 687 859 



Encrypting with input value y=1014. 
Output set: min=l, max=1024 

There are 12 skips & repeats, at: 

661 84 5 907 969 

663 846 907 968 

664 847 908 969 

665 848 909 970 

665 848 909 970 

666 849 910 971 

667 850 911 972 



16 


32 


48 


64 


80 


96 


236 


479 


14 


31 


48 


65 


82 


99 


240 


482 


15 


32 


49 


66 


83 


100 


241 


483 


16 


33 


50 


67 


84 


101 


242 


484 


18 


35 


52 


69 


86 


103 


242 


484 


19 


36 


53 


70 


87 


104 


243 


485 


20 


37 


54 


71 


88 


105 


244 


486 


Maximum 


skips & 


repeats 


for 


a given 


input 



Encrypting with input value y=1015. 
Output set: min=l, max=1024 

There are 12 skips & repeats, at: 



15 


30 


45 


60 


75 


90 


121 


188 


13 


29 


45 


61 


77 


93 


125 


191 


14 


30 


46 


62 


78 


94 


126 


192 


15 


31 


47 


63 


79 


95 


127 


193 


17 


33 


49 


65 


81 


97 


127 


193 


18 


34 


50 


66 


82 


98 


128 


194 


19 


35 


51 


67 


83 


99 


129 


195 



513 642 771 900 

514 643 772 901 

515 644 773 902 

515 644 773 902 

516 645 774 903 

M . , , 517 646 775 904 

Maximum skips & repeats for a given input (so far) -12 



Encrypting with input value y-1016. 
Output set: min=l, max=1024 



There 


are 12 


skips & 


repeats, 


at: 










14 


28 


42 


56 


70 


84 


199 


338 


614 


752 


891 


12 


27 


42 


57 


72 


87 


203 


341 


616 


753 


891 


13 


28 


43 


58 


73 


88 


204 


342 


617 


754 


8 92 


14 


29 


44 


59 


74 


89 


205 


343 


618 


755 


893 


16 


31 


46 


61 


76 


91 


205 


343 


618 


755 


893 


17 


32 


47 


62 


77 


92 


206 


344 


619 


756 


894 


18 


33 


48 


63 


78 


93 


207 


345 


620 


757 


895 


Maximum skips & 


repeats for 


a given input 


(so 


far) : 


12 


Encrypting with 


input 


value 


y=1017. . 










Output 


set: min= 


=1, max=1024 














There 


are 12 


skips & 


repeats, at: 










13 


26 


39 


52 


65 


78 


140 


436 


437 


658 


734 


11 


25 


39 


53 


67 


81 


144 


439 


440 


659 


734 


12 


26 


40 


54 


68 


82 


145 


440 


441 


660 


735 


13 


27 


41 


55 


69 


83 


146 


441 


441 


661 


736 


15 


29 


43 


57 


71 


85 


146 


441 


441 


661 


736 



960 
961 
962 
962 
963 
964 



955 
956 
957 
957 



16 30 44 58 72 86 147 441 442 662 737 958 

17 31 45 59 73 87 148 442 443 663 738 959 
Maximum skips & repeats for a given input (so far): 12 

Encrypting with input value y=1018... 
Output set: min=l, max=1024 



There are 12 skips & repeats, at: 



12 


24 


36 


48 


60 


72 


73 


231 


233 


631 


632 


871 


10 


23 


36 


49 


62 


75 


76 


234 


236 


632 


633 


870 


11 


24 


37 


50 


63 


76 


77 


235 


236 


633 


634 


871 


12 


25 


38 


51 


64 


77 


77 


236 


237 


634 


634 


872 


14 


27 


40 


53 


66 


77 


79 


236 


237 


634 


634 


872 


15 


28 


41 


54 


67 


79 


80 


237 


238 


634 


635 


873 


16 


29 


42 


55 


68 


80 


81 


237 


239 


635 


636 


874 


lmum skips 


& 


repeats 


for 


a given 


input 


(so 


far) : 


12 



Encrypting 


with input 


value 


y= 


1019. . 












Output 


set : 


min=l, max=1024 
















There 


are 12 skips & 


repeats, 


at: 












11 


22 


33 44 


55 


66 


336 


508 


682 


769 


857 


944 


9 


21 


33 45 


57 


69 


340 


511 


684 


770 


857 


943 


10 


22 


34 46 


58 


70 


. 341 


512 


685 


771 


858 


944 


11 


23 


35 47 


59 


71 


342 


513 


686 


772 


859 


945 


13 


25 


37 49 


61 


73 


342 


513 


686 


772 


859 


945 


14 


26 


38 50 


62 


74 


343 


514 


687 


773 


860 


946 


15 


27 


39 51 


63 


75 


344 


515 


688 


774 


861 


947 


Maximum skips & repeats for 


a given input 


(so 


far) : 


12 




Encrypting with input 


value 


y= 


L020. . 












Output 


set : 


min=l, max=1024 
















There are 12 skips & repeats 


, at : 












10 


20 


30 40 


50 


60 


85 


182 


275 


652 • 


747 


936 



8 
9 
10 
12 
13 
14 



19 
20 
21 
23 
24 
25 



30 
31 
32 
34 
35 
36 



41 
42 
43 
45 
46 
47 



Maximum skips & repeats for a given input (so far): 12 

Encrypting with input value y=1021.. 
Output set: min=l, max=1024 



52 63 89 185 277 653 747 935 

53 64 90 186 278 654 748 936 

54 65 91 187 279 655 749 937 

56 67 91 187 279 655 749 937 

57 68 92 188 280 656 750 938 

58 69 93 189 281 657 751 939 



There are 12 skips & repeats, at; 



9 


18 


27 


36 


45 


54 


199 


407 


510 


615 


616 


823 


7 


17 


27 


37 


47 


57 


203 


410 


512 


616 


617 


822 


8 


18 


28 


38 


48 


58 


204 


411 


513 


617 


618 


823 


9 


19 


29 


39 


49 


59 


205 


412 


514 


618 


618 


824 


11 


21 


31 


41 


51 


61 


205 


412 


514 


618 


618 


824 


12 


22 


32 


42 


52 


62 


206 


413 


515 


618 


619 


825 


13 


23 


33 


43 


53 


63 


207 


414 


516 


619 


620 


826 



Maximum skips & repeats for a given input (so far): 12 

Encrypting with input value y=1022... 
Output set: min=l, max=1024 

There are 12 skips & repeats, at: 



8 


16 


24 


32 


40 


48 


222 


336 


567 


684 


799 


915 


6 


15 


24 


33 


42 


51 


226 


339 


569 


685 


799 


914 


7 


16 


25 


34 


43 


52 


227 


340 


570 


686 


800 


915 


8 


17 


26 


35 


44 


53 


228 


341 


571 


687 


801 


916 


10 


19 


28 


37 


46 
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Encrypting with input value y=1023... 
Output set: min=l, max=1024 



There are 12 skips & repeats, at: 
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Encrypting with input value y=1024 
Output set: min=l, max=1024 



There are 12 


skips & 


repeats, 
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octave :1Q> date 
ans = I 

octave: 11> clock 
ans = 



octave: 12> diary off 
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Pronounceable Passphrase Worksheet 

Digit Content " Min. Digits 

Alternating consonants (C), Vowels (V) C: 1 1 

C,13: {b,d,g,h,k,!,m,n,p,r,s,t,z} V,5: {a,e,i,o,u} V: 10 



Entropy 

About 64 bits, for 
minimum digits 



by Edwin A. Suominen 
Example Passphrase 
njhudezo dogiz pozubume 




SECURE PASSPHRASE 

Z2-Z6 illustrate screen shots of a secure passphrase entry system according to 
various aspects of the invention, illustrating an exemplary user interface at different 
points during the input of a passphrase without the use of ikeystrokes. Thus, the 
security hazard of keystroke loggers can be avoided. In addition, the mouse-based 
input method may be preferred by users over the use of a keyboard, for example when 
they are entering their passphrase to browse encrypted e-mails or files. In an 
experiment the applicant carried out, "entering" the passphrase by the mouse input 
method (simulated by tapping a pen onto a printout similar to Z2-Z6) did not take him 
much longer than typing in the passphrase. 

Advantageously, the passphrase is represented in the illustrated embodiment (as 
it is entered) both as circled letters and has a pair of stair-stepped line segments having 
characteristic shapes. Viewing the passphrase and its associated characteristic shapes of 
the line segments helps the user to remember the passphrase. Human brains are good at 
remembering pronounceable words (even when they are nonsense words) and are also 
good at remembering characteristic shapes. The combination of bjoth characteristics of a 
unique passphrase can be expected to improve the user's ability to remember it when 
the time comes to input the passphrase. 

A delay system according to another aspect of the invention, illustrated in the 
block diagrams of Z7 and Z8, makes a secure delay according td various aspects of the 
invention less unobtrusive to the user. It does so by beginning the delay process when 
the passphrase has been partially entered. Advantageously, sucha system performs the 
delay computations substantially in parallel with the unavoidable delay of the user's 
input of the passphrase. Even when typing quickly, it took the applicant at least about 
three seconds to enter the passphrase during his experiment. This 1 is a substantial period 
of delay that, when made computationally unavoidable, makes cracking the 2 A 48 
possible combinations of the randomly chosen passphrase nearly impossible with the 
computing horsepower available around the date of filing of the present application. 
(See Z9 and Z10 for a detailed computational analysis.) The screen shots of Z2-Z6 show 
the "private key delayed unlocking" beginning with the first I consonant-vowel pair 
entered by the user. The delayed unlocking (the inventive "computationally 
unavoidable" delay) continues substantially in parallel with! the user's input of 
additional consonant-vowel pairs. Note Z6, in which the passpbW is confirmed and 
the private key has been completely unlocked. 

### 



^-1 



Number of consonants 13 
Number of vowels 5 
Combinations in each CV pair 65 
Pairs 8 
Total Combinations 318,644,812,890,625 , v ! 

Base-2 Entropy 48 ( Wi& ) j 

Mean Input Times (g*g*A i^e»»0 

Touch typing (fast), hidden "digits 4.70 CttC \ =(5.3+ 4^ 5+5 1+4 1)/5 

Tough typing (fast), digits shown 3.88 J =(3.8+ 3! 5+34+35+5 2)/5 

Mouse, drag line through digits 9.32 =(97+92+98+8 9+ 9V5 

Mouse, click on digits 8.28 = (8 + 8.5+ 8.9+ 8+ 8.3)/5 

Set total delay to minimum total input time 3.88 (SecA ' 
(Keeps user from noticing the delay) ' 

Software (equivalent machine) 

Attack Analysis 

Total number of seconds for all delayed 

combinations (on equivalent machine) 1 ,236,341 ,874,01 5,620 

Average number of years on equivalent — , J* 

machine (1/2 total) 19,602,072 "f«**ufcW, $nrr«sfc 

Effective lifetime of signing key (years) 20 \ 
Performance multiplier at end of life (Moore's i 

law) • 10,321 

Total number of seconds for all delayed 

combinations (on future machine) 1 1 9,785,790,491 j 

Number of future machines in network 1 ,000 

Average number of years on future N> + , x , 

machine network (1/2 total) 0.95 ^vo> t^Wi / J 1 

Massively Parallel Hardware (FPGA, Jr t> 

ASIC) Attack Analysis _ ^ivUs j ^ K * 

Budget (current equivalent dollars) 1 ,000,000 4-/ ft#r j rs QVi c£ 

Cost per FPGA or ASIC (with N RE) 400 f ^Tj&s ™ r ?>w 

Number of available parallel branches in li * j ^i*w 1 

budget 2,500 r U **<\ a' 

Number of parallel branches operating F nv s( ^ I 

simulateously . 2,048 ^} 

Performance multiplier of each branch over j 

equivalent machine 100 j 
Total performance multiplier over j 

equivalent machine 204,800 

| 

Total number of seconds for all delayed 

combinations 6,036,825,557 ; 

Average number of years (1/2 total) 96 «<: *r l> \ • . »\ 

Effective lifetime of signing key (years) 20 ev*^ vj] U<"$<, \> i f ' 



t 



Performance multiplier at end of life 
(Moore's law) 



10,321 



Total number of seconds for all delayed 
combinations (on future hardware system) 584 892 

Average number of days on future 

machine (1/2 total) 



But here's where the key lookup helps 
protect against such attacks. . . 

Random keys in key lookup table 

Size of each key (in bytes) 
Total memory for lookup table (bytes) 
Total fast SRAM memory for all branches 
(bytes) 

Total MB of fast SRAM memory 

Cost per MB of SRAM (current equivalent 
dollars) 
Total cost of SRAM 

(See budget above.) 



3.38 



8,192 
16 

131,072 

268,435,456. 
262,144 

10 

2,621,440 
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(Suet fit; in 256K cache) 
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Operations and is not part of the Official Record 



Defective images within this document are accurate representations of the original 
documents submitted by the applicant. 

Defects in the images include but are not limited to the items checked: 

□ BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 

□ FADED TEXT OR DRAWING 

□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 
□/GRAY SCALE DOCUMENTS 



□ REFERENCE(S) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 
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